LCP-CAS: Lattice-Based Conditional Privacy-Preserving Certificateless Aggregation Signature Scheme for Industrial IoT

TL;DR

This paper introduces a new secure signature method for industrial IoT that balances privacy and traceability while resisting quantum attacks.

Contribution

A novel lattice-based conditional privacy-preserving certificateless aggregation signature scheme with linear scalability and post-quantum security.

Findings

LCP-CAS achieves linear scalability in verification complexity using an unordered aggregation algorithm.

The scheme provides device anonymity with identity traceability under conditional privacy mechanisms.

LCP-CAS outperforms existing schemes in aggregation and verification efficiency for large-scale IoT applications.

Abstract

Aiming at the challenge that traditional signature schemes struggle to simultaneously achieve efficiency, resistance to quantum attacks, and privacy protection, this paper proposes a lattice-based conditional privacy-preserving certificateless aggregate signature method (LCP-CAS). The scheme adopts an unordered aggregation algorithm to compress multiple signatures, in arbitrary order, into a single fixed-length aggregate signature, thereby achieving linear scalability in verification complexity. Its security is based on the hardness of the Ring Short Integer Solution (RSIS) problem, ensuring post-quantum resistance. By incorporating a conditional privacy-preserving mechanism, the scheme realizes device anonymity while supporting identity traceability, thus balancing privacy protection with regulatory requirements. Security analysis shows that the scheme meets the security requirements, including integrity, non-repudiation, conditional privacy preservation, and resistance to collusion attacks. Compared with existing related schemes, LCP-CAS achieves reduces aggregation and verification overhead while maintaining practicality in large-scale settings such as industrial IoT and device monitoring.

Figures